aws-cdk-lib.aws_bedrockagentcore.CfnOAuth2CredentialProvider.Oauth2ProviderConfigOutputProperty

Oauth2ProviderConfigOutputProperty Struct

Output configuration for an OAuth2 provider.

Source

Generated code

Type last changed

v2.268.0 · 2 Sep 2026

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';
const oauth2ProviderConfigOutputProperty: bedrockagentcore.CfnOAuth2CredentialProvider.Oauth2ProviderConfigOutputProperty = {
  clientAuthenticationMethod: 'clientAuthenticationMethod',
  clientId: 'clientId',
  oauthDiscovery: {
    authorizationServerMetadata: {
      authorizationEndpoint: 'authorizationEndpoint',
      issuer: 'issuer',
      tokenEndpoint: 'tokenEndpoint',

      // the properties below are optional
      responseTypes: ['responseTypes'],
    },
    discoveryUrl: 'discoveryUrl',
  },
  onBehalfOfTokenExchangeConfig: {
    grantType: 'grantType',

    // the properties below are optional
    tokenExchangeGrantTypeConfig: {
      actorTokenContent: 'actorTokenContent',

      // the properties below are optional
      actorTokenScopes: ['actorTokenScopes'],
    },
  },
  privateEndpoint: {
    managedVpcResource: {
      endpointIpAddressType: 'endpointIpAddressType',
      subnetIds: ['subnetIds'],
      vpcIdentifier: 'vpcIdentifier',

      // the properties below are optional
      routingDomain: 'routingDomain',
      securityGroupIds: ['securityGroupIds'],
      tags: {
        tagsKey: 'tags',
      },
    },
    selfManagedLatticeResource: {
      resourceConfigurationIdentifier: 'resourceConfigurationIdentifier',
    },
  },
  privateEndpointOverrides: [{
    domain: 'domain',
    privateEndpoint: {
      managedVpcResource: {
        endpointIpAddressType: 'endpointIpAddressType',
        subnetIds: ['subnetIds'],
        vpcIdentifier: 'vpcIdentifier',

        // the properties below are optional
        routingDomain: 'routingDomain',
        securityGroupIds: ['securityGroupIds'],
        tags: {
          tagsKey: 'tags',
        },
      },
      selfManagedLatticeResource: {
        resourceConfigurationIdentifier: 'resourceConfigurationIdentifier',
      },
    },
  }],
  privateKeyJwtConfig: {
    additionalHeaderClaims: {
      additionalHeaderClaimsKey: 'additionalHeaderClaims',
    },
    additionalPayloadClaims: {
      additionalPayloadClaimsKey: 'additionalPayloadClaims',
    },
    privateKeySource: {
      kmsKeySource: {
        kmsKeyArn: 'kmsKeyArn',
      },
    },
    signingAlgorithm: 'signingAlgorithm',
  },
};

Properties

clientAuthenticationMethod?optionalstringclient_authentication_method?optionalstrclientAuthenticationMethod?optionalStringClientAuthenticationMethod?optionalstringClientAuthenticationMethod?optional*string#

The client authentication method used when authenticating with the token endpoint.

clientId?optionalstringclient_id?optionalstrclientId?optionalStringClientId?optionalstringClientId?optional*string#

oauthDiscovery?optionalIResolvable | CfnOAuth2CredentialProvider.Oauth2DiscoveryPropertyoauth_discovery?optionaltyping.Union[IResolvable, Oauth2DiscoveryProperty]oauthDiscovery?optionalIResolvableOauthDiscovery?optionalIResolvableOauthDiscovery?optionalinterface{}#

Discovery information for an OAuth2 provider.

onBehalfOfTokenExchangeConfig?optionalIResolvable | CfnOAuth2CredentialProvider.OnBehalfOfTokenExchangeConfigPropertyon_behalf_of_token_exchange_config?optionaltyping.Union[IResolvable, OnBehalfOfTokenExchangeConfigProperty]onBehalfOfTokenExchangeConfig?optionalIResolvableOnBehalfOfTokenExchangeConfig?optionalIResolvableOnBehalfOfTokenExchangeConfig?optionalinterface{}#

Configuration for on-behalf-of token exchange.

privateEndpoint?optionalIResolvable | CfnOAuth2CredentialProvider.PrivateEndpointPropertyprivate_endpoint?optionaltyping.Union[IResolvable, PrivateEndpointProperty]privateEndpoint?optionalIResolvablePrivateEndpoint?optionalIResolvablePrivateEndpoint?optionalinterface{}#

The private endpoint configuration for connecting to private resources in your VPC.

privateEndpointOverrides?optionalIResolvable | IResolvable | CfnOAuth2CredentialProvider.PrivateEndpointOverrideProperty[]private_endpoint_overrides?optionaltyping.Union[IResolvable, typing.List[typing.Union[IResolvable, PrivateEndpointOverrideProperty]]]privateEndpointOverrides?optionalIResolvablePrivateEndpointOverrides?optionalIResolvablePrivateEndpointOverrides?optionalinterface{}#

The list of private endpoint overrides for the OAuth2 provider.

Each override maps a specific domain to a private endpoint, enabling secure connectivity through VPC Lattice resource configurations.

privateKeyJwtConfig?optionalIResolvable | CfnOAuth2CredentialProvider.PrivateKeyJwtConfigPropertyprivate_key_jwt_config?optionaltyping.Union[IResolvable, PrivateKeyJwtConfigProperty]privateKeyJwtConfig?optionalIResolvablePrivateKeyJwtConfig?optionalIResolvablePrivateKeyJwtConfig?optionalinterface{}#

Configuration for private_key_jwt client authentication (RFC 7523).